Office 365 Germany endpoints

Summary:    Office 365 requires connectivity to the Internet. The endpoints below should be reachable for customers using Office 365 Germany plans only.

Note: Microsoft is developing a REST-based web service for the IP address and FQDN entries on this page. This new service will help you configure and update network perimeter devices such as firewalls and proxy servers. You can download the list of endpoints, the current version of the list, or specific changes. This service will eventually replace the XML document, RSS feed, and the IP address and FQDN entries on this page. To try out this new service, go to Web service.

Office 365 endpoints: Worldwide (including GCC) | Office 365 operated by 21 Vianet | Office 365 Germany | Office 365 U.S. Government DoD | Office 365 U.S. Government GCC High |

Last updated: 7/2/2018 - RSS    List of changes to the Office 365 Germany endpoints

Office 365 requires internet connectivity from every computer connecting to the service, this article serves as a reference for the specific Microsoft and third-party endpoints computers need to be able to reach. Start with our guide managing Office 365 endpoints to understand how best to use the information here. Except for emergency changes, endpoints are updated at the end of each month.

Important: Destination endpoints may be listed as an IP addresses only, FQDN/URI only, or a combination of the two. Some endpoints are shared within Office 365 and some are shared with consumer services. Pay attention to the introduction for each service, specific guidance that applies only to that service will be included there. Office 365 depends on internet based services such as Microsoft owned cloud services with dynamic addressing, Domain Name Services (DNS), Content Delivery Networks (CDN), Certificate Revocation Lists (CRL), and other third party services where no IP addresses are available. Where IP or FQDN information is not available, we've marked them as Not Available (N/A) in the tables below.

Every Office 365 service depends on the required endpoints in the Office 365 portal and shared and Office 365 authentication and identity sections to function. The other endpoints are grouped to make selective service decisions.

Changes for each Office 365 service are combined and published at the end of each month. Occasionally emergency changes will occur outside of the end of month publishing. Expect changes three business days prior to the last business day of the month. You can always refer to the list of changes to the Office 365 Germany endpoints

There's a lot of information on this page, can we present it to you in a simpler way?

Please consider voicing your thoughts at the bottom of this page, under the heading Was this information helpful? Click yes or no and enter detailed feedback. The more feedback we get from you the easier it will be for us to improve the page.

Service

IPv4 addresses

IPv6 addresses

Destination FQDNs

Endpoint resides in a Microsoft German cloud datacenter?

Port

Portal and shared

51.4.71.0/24
51.5.71.0/24
51.4.70.0/24
51.5.70.0/24
51.4.70.0/24
51.5.70.0/24
51.4.226.115/32
51.4.227.178/32
51.4.230.178/32
51.5.147.48/32
51.5.242.163/32
51.5.245.67/32
2a01:4180:2401::11f
2a01:4180:2001::234
2a01:4180:2401::33b
2a01:4180:2001::92

*.onmicrosoft.de

portal.office.de

*.osi.office.de

www.office.de

office.de

webshell.suite.office.de

yes

TCP 80 & 443

Portal and shared signup

N/A

N/A

cegsignup.microsoft.de

negsignup.microsoft.de

yes

TCP 80 & 443

Portal and shared

N/A

N/A

agent.office.de

commerceapi.office.de

clientlog.portal.office.de

videoplayer.osi.office.net

<guid>.cloudfront.net

prod.msocdn.de

shellprod.msocdn.de

r1.res.office365.com

no

TCP 80 & 443

Portal and shared DNS

N/A

N/A

*.office.de.akadns.net

*.windows.de.nsatc.net

*.de.msods.nsatc.net

officehome.msocdn.de

no

TCP 80 & 443

Certificate services

N/A

N/A

*.d-trust.net

no

TCP 80 & 443

(Back Home)

Service

IPv4 addresses

IPv6 addresses

Destination FQDNs

Endpoint resides in a Microsoft German cloud datacenter?

Port

Office 365 authentication and identity

51.4.70.0/24
51.5.70.0/24
51.4.136.0/24
51.5.136.0/24
51.4.144.0/24
51.5.144.0/24

N/A

sts.cloudapi.de

login.cloudapi.de

accesscontrol.cloudapi.de

logincert.microsoftonline.de

graph.cloudapi.de

pas.cloudapi.de

passwordreset.activedirectory.microsoftazure.de

companymanager.microsoftonline.de

becws.microsoftonline.de

directoryProvisioning.cloudapi.de

syncservice.microsoftonline.de

adminwebservice.microsoftonline.de

provisioningapi.microsoftonline.de

adminwebservice.microsoftonline.de

provisioningapi.microsoftonline.de

login.microsoftonline.de

device.login.microsoftonline.de

msoid.<tenantdomain>

yes

TCP 80 & 443

Office 365 authentication and identity

N/A

N/A

*.cloudapi.de

*.azurecloudapp.de

*.windows.de

microsoftonline.de

decloudapi.net

decloudapp.net

decloudapi.de

windowsazure.de

yes

TCP 80 & 443

Office 365 authentication and identity CDNs

N/A

N/A

secure.aadcdn.microsoftonline-p.com

no

TCP 80 & 443

AAD Connect

N/A

N/A

*.microsoftonline.de

*.windows.net

yes

TCP 80 & 443

(Back Home)

Service

IPv4 addresses

IPv6 addresses

Destination

Endpoint resides in a Microsoft German cloud datacenter?

Port

Exchange Online

51.4.64.0/23
51.5.64.0/23

N/A

outlook.office.de

Autodiscover-outlook.office.de

yes

TCP 25, 80, 143, 443, 587, 993, 995

Exchange Online CDN

N/A

N/A

r1.res.office365.com

no

TCP 80 & 443

(Back Home)

Service

IPv4 addresses

IPv6 addresses

Destination

Endpoint resides in a Microsoft German cloud datacenter?

Port

Exchange Online Protection (including SCC & auditing)1

51.4.72.0/24
51.5.72.0/24
51.4.80.0/27
51.5.80.0/27
2a01:4180:4051:0800::/64
2a01:4180:4050:0800::/64
2a01:4180:4051:0400::/64
2a01:4180:4050:0400::/64

*.protection.outlook.de

<customer domain-key>.mail.protection.outlook.de

<tenant>.mail.protection.outlook.de

yes

TCP 25 & 443

1 The Security and Compliance Center (SCC) provides support for Azure ExpressRoute for Office 365. The same applies for many features exposed through the SCC such as Reporting, Auditing, Advanced eDiscovery, Unified DLP, and Data Governance. Two specific features, PST Import and eDiscovery Export, currently do not support Azure ExpressRoute with only Office 365 route filters due to their dependency on Azure Blob Storage. To consume those features, you need separate connectivity to Azure Blob Storage using any supportable Azure connectivity options, which include Internet connectivity or Azure ExpressRoute with Azure Public route filters. You have to evaluate establishing such connectivity for both of those features. The Office 365 Information Protection team is aware of this limitation and is actively working to bring support for Azure ExpressRoute for Office 365 as limited to Office 365 route filters for both of those features.

(Back Home)

Service

IPv4 addresses

IPv6 addresses

Destination

Endpoint resides in a Microsoft German cloud datacenter?

Port

SharePoint Online and OneDrive for Business

51.4.66.0/23
51.5.66.0/23

N/A

*.sharepoint.de

*.svc..ms

<tenant-name>.sharepoint.de

yes

TCP 80 & 443

SharePoint Online and OneDrive for Business CDNs

N/A

N/A

shellprod.msocdn.de

Static.sharepointonline.com

spoprod-a.akamaihd.net

no

TCP 80 & 443

OneDrive for Business: update verification and download

N/A

N/A

oneclient.sfx.ms

no

TCP 80 & 443

OneDrive for Business: Determines consumer v commercial

N/A

N/A

https://officeclient.microsoft.com/config16

http://odc.officeapps.live.com/odc/emailhrd

no

TCP 80 & 443

OneDrive for Business: Oauth login with AAD

N/A

N/A

yes

TCP 80 & 443

OneDrive for Business: Client push notification

N/A

N/A

wns.windows.com

no

TCP 80 & 443

OneDrive for Business: supportability and telemetry

N/A

N/A

mobile.pipe.aria.microsoft.com

ssw.live.com

watson.telemetry.microsoft.com

no

TCP 80 & 443

OneDrive for Business: Office integration

N/A

N/A

odc.osi.office.de

yes

TCP 80 & 443

OneDrive for Business: Office integration

N/A

N/A

officeapps.live.com

no

TCP 80 & 443

SharePoint Hybrid Search - Endpoint to SearchContentService where the hybrid crawler feeds documents

N/A

N/A

*.search.production.de.azuretrafficmanager.de

yes

443

SharePoint Hybrid Search - Endpoint to SearchContentService to successfully authenticate to remote farm with OAuth authentication and authorization. The authorization server in this scenario is Microsoft Azure Access Control Service (ACS).

N/A

N/A

login.microsoftonline.de

yes

443

SharePoint Hybrid Search - Required for onboarding script to connect to Office 365 Provisioning Web Services. As a part of script execution adds the Office 365 Service Principal ID to the local farm and sets the correct Service Principal Name in Azure AD for the on-premises URL. This ensures that the outbound query federation can occur between the Office 365 tenant and the on-premises farm

N/A

N/A

provisioningapi.microsoftonline.de

yes

443

(Back Home)

Service

IPv4 addresses

IPv6 addresses

Destination

Endpoint resides in a Microsoft German cloud datacenter?

Port

Skype for Business Online

51.4.68.0/26
51.4.68.128/25
51.5.69.0/26
51.5.69.128/25
2a01:4180:4040:2::/64
2a01:4180:4040:1::/64
2a01:4180:4040:8::/64 
2a01:4180:4040:7::/64

*.germeetings.skype.de

*.infra.skype.de

*.online.skype.de

*.resources.skype.de

yes

TCP 80, 443, 5061, 50000-59999 & UDP 3478, 50000-59999

(Back Home)

Service

IPv4 addresses

IPv6 addresses

Destination

Endpoint resides in a Microsoft German cloud datacenter?

Port

Office Online

51.4.144.200/32

51.5.149.3/32

51.18.16.0/23

N/A

*.online.office.de

broadcast.online.office.de

excel.online.office.de

onenote.online.office.de

powerpoint.online.office.de

view.online.office.de

visio.online.office.de

word-edit.online.office.de

word-view.online.office.de

yes

TCP 443

Office Online CDN

N/A

N/A

broadcast.cdn.office.de

excel.cdn.office.de

onenote.cdn.office.de

powerpoint.cdn.office.de

officeapps.cdn.office.de

view.cdn.office.de

visio.cdn.office.de

word-edit.cdn.office.de

word-view.cdn.office.de

no

TCP 443

(Back Home)

Service

IPv4 addresses

IPv6 addresses

Destination

Endpoint resides in a Microsoft German cloud datacenter?

Port

Office 365 ProPlus

51.4.144.41
51.4.144.174
51.4.145.38
51.4.147.81
51.5.147.242
51.4.147.233
51.4.148.12
51.5.149.123
51.5.149.100
51.5.149.119
51.5.149.180
51.5.149.186
51.4.150.145

N/A

ols.osi.office.de

pptcs.osi.office.de

pptps.osi.office.de

wordcs.osi.office.de

wordps.osi.office.de

excelcs.osi.office.de

excelps.osi.office.de

arms.osi.office.de

plattest.osi.office.de

manage.osi.office.de

scram.office.osi.de

ols.office.osi.de

omexdiagnostics.osi.office.de

omexdatastore.osi.office.de

retailer.osi.office.de

yes

TCP 80 & 443

Office 365 ProPlus

51.18.0.0/21

N/A

N/A

no

TCP 80 & 443

(Back Home)

Service

IPv4 addresses

IPv6 addresses

Destination

Endpoint resides in a Microsoft German cloud datacenter?

Port

Office Mobile

N/A

N/A

store.office.de

osi.office.de

sharepoint.de

microsoftonline.de

graph.microsoft.de

https://odc.osi.office.de/odc/help/clientdeveloper

https://wordsgs.osi.office.de/wordsgs/WordSuggestionService.svc/WordSuggestion

https://roaming.osi.office.de/rs/RoamingSoapService.svc

https://odc.osi.office.de/odc/emailhrd

https://odc.osi.office.de/odc/insertmedia

https://ocws.osi.office.de/ocs/docs/recent

https://ocws.osi.office.de/ocs/docs/sharedwithme

https://ocws.osi.office.de/ocs/locations/recent

https://odc.osi.office.de/odc/servicemanager/manageserviceredir.aspx

https://odc.osi.office.de/odc/servicemanager/liveredir

https://odc.osi.office.de/odc/servicemanager/catalog

https://odc.osi.office.de/odc/servicemanager/serviceadd

https://odc.osi.office.de/odc/servicemanager/servicedetails

https://odc.osi.office.de/odc/servicemanager/serviceremove

https://odc.osi.office.de/odc/servicemanager/reportserviceerror

https://odc.osi.office.de/odc/servicemanager/v{0}/sites

https://odc.osi.office.de/odc/servicemanager/userconnected

yes

TCP 80 & 443

Service

IPv4 addresses

IPv6 addresses

Destination

Endpoint resides in a Microsoft German cloud datacenter?

Port

Office Mobile

N/A

N/A

office15client.microsoft.com

odc.officeapps.live.com

odcsm.officeapps.live.com

roaming.officeapps.live.com

o15.officeredir.microsoft.com

office.microsoft.com

officeimg.vo.msecnd.net

no

TCP 80 & 443

(Back Home)

Expand your Office skills
Explore training
Get new features first
Join Office Insiders

Was this information helpful?

Thank you for your feedback!

Thank you for your feedback! It sounds like it might be helpful to connect you to one of our Office support agents.

×